Check trusted site and activeX approval site list

Check the trusted site and activeX approval site list in IE7


After adding the trusted site and activex approval list through GPO, we have to check from client system that the newly added sites are updated or not, normally it take some time to replicate if you have more complicated AD environment.

We can use the below commands to confirm that the newly added sites and updated on the client system.


Below command will list the entire trusted site

reg Query "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapKey"

Below command will list the entire activex approval site

reg Query "HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller\ApprovedActiveXInstallSites"

reg Query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ApprovedActiveXInstallSites"

Below command will find only the require site (find for a single site)

You can pipe the registry query output to find command, like below

reg Query "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapKey" | find /N "site name"

Replace the site name with the aboveccommand

Related Articles

Adding trusted site

Configuring trusted website and activex settings for IE7 or Vista and later versions using group policy

Adding Activex approval list

Share this . . .